CVE-2026-119727

Name of the Vulnerable Software and Affected Versions GStreamer (affected versions not specified)

Description A flaw exists in the gst-plugins-bad H.265 video parser. An integer underflow occurs during the upper-bound computation when parsing a specially crafted H.265 bitstream that includes a Screen Content Coding (SCC) extension with specific palette predictor initializer settings. This allows the parser to accept an out-of-range value for the number of palette predictor entries, leading to a write operation beyond the end of a fixed-size array. This memory corruption results in an application crash, enabling a denial-of-service attack if a malformed H.265 media file is processed by a vulnerable application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.